cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

How to whitelist a process/service that calls cscript and then a tmp file

Hi,

I have a service m_agent_service.exe which frequently runs C:\Windows\SysWOW64\cscript.exe with arguments such as C:\Windows\TEMP\m_a3832.tmp. The execution of the tmp files is being blocked, logged and alerted at the console. Is there a way to whitelist this scenario? Thank you in advance.



2 Replies

Re: How to whitelist a process/service that calls cscript and then a tmp file

How are the *.tmp files created in the first place? Is it a process that belongs to the Meraki Systems Manager Agent product? If so can you not add the binary that creates these files as a Trusted Updater so the *.tmp file is added to the Whitelist and permitted to execute?

HTH, Mick

neelima
Level 12
Report Inappropriate Content
Message 3 of 3

Re: How to whitelist a process/service that calls cscript and then a tmp file

Sean,

Use the Parent Update policyMeraki.png

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community